Senior Product Security Engineer @RedHat | SDE @Fedora | #PSIRT #RHEL | Ex @parrotsec

Berhampore, West Bengal, India
Joined March 2018
Hey @INDmoneyApp , my outbound RSU/stock transfer is stuck and the app chatbot is looping. Standard support is completely unresponsive. Please get a human customer agent to look into Ticket ID: 3538456 immediately. @ashishkashyap #INDmoney @AlpacaHQ #RSU
1
Introducing PageBreak, an agentic vulnerability discovery tool using deterministic validation to achieve a near-zero false positive rate. How it works: blog.google/security/agentic… For real-world vulnerabilities PageBreak has discovered 👇 bughunters.google.com/blog/p…
22
198
9
1,209
99,028
Sandipan Roy retweeted
Alibaba open-sourced the code reviewer it says has served tens of thousands of developers and found millions of defects internally. Open Code Review does not leave the whole review loop to an LLM: deterministic code handles file coverage, bundling, rule matching and comment positioning, while the agent handles reasoning and repository context. On its benchmark of 200 PRs across 50 open-source repos, Alibaba reports higher precision and F1 than Claude Code with the same model, using roughly 1/9 the tokens, with lower recall as the trade-off. GitHub Repo: github.com/alibaba/open-code…
49
183
20
1,539
129,377
Sandipan Roy retweeted
A 7-person team just took 3 small open-source models to #1 in cybersecurity at their size classes. They used Qwen3.8-27B, Qwen3.6-35B-A3B, and Qwen3.5-122B-A10B. All three ranked #1 among open models at comparable sizes. TL:DR: First they let agents work through controlled exploit / cyber environments, verified the results, then fine-tuned on that data. Here is what they did: They built coding, vulnerability, CTF, Linux-kernel-history, full-exploit, firmware, and device-backed environments. Kept what worked: models learned from runs that passed execution verification / auditing. Using pure fine-tuning (no RL), their three models improved an average of +23.76% on the full CyberGym suite. Feyospace-s1 hit 63.24% verified success and #10 on CyberGym Paper: arxiv.org/pdf/2609.08418
5
36
2
240
14,685
The 14B Rust specialist Open-model run locally. - Strand-Rust-Coder-14B is fine-tuned specifically for Rust ownership, - lifetimes, concurrency, clean refactors - and production-ready strong compile-ready code. - huggingface.co/Fortytwo-Netw…
9
27
7
249
10,074
50 websites that feel like the internet’s hidden toolbox 🧰 1. unpaywall.org — Free research papers 2. openlibrary.org — Borrow books online 3. doaj.org — Free academic journals 4. alternativeto.net — App alternatives 5. justwatch.com — Find where to stream 6. archive.org — Internet archives 7. gutenberg.org — 70K+ free books 8. openstax.org — Free textbooks 9. openculture.com — Free courses 10. wolframalpha.com — Solve complex problems 11. photopea.com — Photoshop alternative 12. squoosh.app — Compress images 13. remove.bg — Remove backgrounds 14. cleanup.pictures — Remove objects 15. unscreen.com — Remove video backgrounds 16. carbon.now.sh — Beautiful code images 17. ray.so — Code screenshots 18. shots.so — Product mockups 19. smartmockups.com — Create mockups 20. haveibeenpwned.com — Check data breaches 21. virustotal.com — Scan files & URLs 22. privnote.com — Self-destructing notes 23. temp-mail.org — Temporary email 24. file.io — Temporary file sharing 25. archive.ph — Save webpages 26. similarsites.com — Find similar websites 27. radio.garden — Explore global radio 28. everynoise.com — Discover music genres 29. tunefind.com — Find songs from shows 30. musicforprogramming.net — Focus music 31. mynoise.net — Custom background sounds 32. coffitivity.com — Café ambience 33. elicit.org — Research assistant 34. consensus.app — Research-backed answers 35. connectedpapers.com — Research connections 36. semanticscholar.org — Academic search 37. scispace.com — Understand research papers 38. summarize.tech — YouTube summaries 39. phind.com — AI for developers 40. regex101.com — Test regex 41. codebeautify.org — Format code 42. jsonformatter.org — Format JSON 43. explainshell.com — Understand terminal commands 44. raindrop.io — Bookmark manager 45. downdetector.com — Check outages 46. tineye.com — Reverse image search 47. fast.com — Internet speed test 48. smallpdf.com — PDF tools 49. ilovepdf.com — Merge/split PDFs 50. 10minutemail.com — Temporary email Save this. You’ll definitely need some of these later. 🔖 Follow @zakiraicoder for more useful websites, AI tools & tech resources.
59
597
9
2,732
151,379
Sandipan Roy retweeted
AI built via #opensource is AI built to last. Projects like llm-d demonstrate that the most resilient infrastructure isn't owned by a single company—it's strengthened by a community. Read why we believe AI infrastructure must be built in the open: red.ht/4zuuMpM
1
6
1,110
Sandipan Roy retweeted
ATTENTION The bible for running LLMs locally is now available online to read for FREE Covers what to use on - Laptop / edge / odd hardware - Mac-first workflows - Single RTX GPUs - 2-4+ NVIDIA / CUDA GPUs - General production serving - Long-context / MoE / routing - NVIDIA max performance - Cluster orchestration Software - llama.cpp - MLX / MLX-LM - ExLlamaV2 - ExLlamaV3 - vLLM - SGLang - TensorRT-LLM - NVIDIA Dynamo You should read this, and if you cannot now then you most definitely wanna bookmark it for later Local & Opensource AI FTW
30
121
6
1,028
85,268
Sandipan Roy retweeted
The Kimi K3 architecture figure for yesterday's big open-weight model release, along with some observations and thoughts. 1. Yes, it looks relatively complicated, but it's essentially a scaled-up production version of their Kimi Linear model they released last year (scaled up from 48B -> 2.8T; K3 is by far the biggest open-weight model right now) 2. The one new component compared to Kimi Linear is the LatentMoE. I omitted it in the figure below since it's already very crowded, but that's essentially the same LatentMoE as in Nemotron 3 Ultra (you can find it in my LLM Architecture Gallery if you are curious). The idea here is to compress (down-project) large linear layers similar to multi-head latent attention. 3. Kimi K3's overall trend (similar to Nemotron 3, DeepSeek V4, and others) is also towards better inference efficiency. That is, there are many components that replace existing components with efficiency-tweaked versions. I.e., MoE -> LatentMoE, regular attention -> multi-head latent attention and Kimi Delta Attention. (I also have short tutorials and write-ups in my gallery if you are curious about additional details). 4. The one component change that is not an efficiency tweak is attention residuals. Like DeepSeek V4 improved the residual path with mHC (manifold-constrained Hyper-Connections), attention residuals are a way to improve the residual path, but it works a bit differently. I.e., mHC made the residual path wider. Attention residuals (also already part of Kimi Linear) connect the residuals across layers; the connection itself uses an attention score for an important/contribution weight. According to the report, it improves the validation loss and downstream performance (a bit) consistently and adds about 4% in training cost and 2% in inference cost. 5. Interestingly, Kimi K3 got rid of all RoPE layers and uses NoPE (No Positional Embeddings) everywhere instead. (Again, this is inherited from Kimi Linear). In other architectures, the recent trend was towards RoPE in local attention layers (like sliding window attention) and NoPE in the global layers. There were a few architectures that only used NoPE everywhere, but this is the first frontier-level one as far as I know. 6. Kimi K3 now also has native multimodal support, which is great! There are several other interesting training tidbits in the technical report, but that's it from the architecture front so far. A really great release overall.
105
616
30
4,073
239,278
Sandipan Roy retweeted
Releasing the model weights and technical report of Kimi K3. Kimi K3 is our most capable model: a 2.8T MoE model with native visual understanding and a 1M-token context window. New model architecture: 2.5x the intelligence per unit of compute, not just more params. Alongside Kimi K3, we're opening up more of the stack behind it — high-performance attention kernels, MoE communication library, and infrastructure for running agent environments at scale. Model weights: huggingface.co/moonshotai/Ki… Tech report: github.com/MoonshotAI/Kimi-K… Tech blog: kimi.com/blog/kimi-k3
1,544
7,193
2,353
46,016
14,745,974
Sandipan Roy retweeted
🧩 Kimi K3’s Architecture Is Here—and KDA + AttenRes Arrive Together Zhihu contributor kaiyuan reconstructed an early Kimi K3 architecture diagram from the information currently available, using K2.5 as the baseline. The architecture is now public, although the model weights have yet to be released. One detail already stands out: KDA and AttenRes appear together in K3’s design. 🔍 A prediction that landed When Kimi K2.6 was released, kaiyuan predicted that KDA and AttenRes might arrive as a pair. K3’s architecture has now confirmed that intuition. 👉Check it out: zhihu.com/question/202971452… 🛠 An evolving architecture map This is an initial, manually assembled draft intended to make K3’s structure easier to inspect. The diagram will be updated once the official weights become available. 📊High-resolution diagram: github.com/CalvinXKY/InfraTe… 🔗 Full Reading: zhihu.com/pin/20636700347030… #KimiK3 #Kimi #MoonshotAI #LLM #AIInfrastructure #ModelArchitecture
7
105
5
522
51,113
Sandipan Roy retweeted
Quantum computers will one day break the encryption protecting your messages. Apple is preparing for that now and they just made their work public. Apple has open-sourced the post-quantum cryptography code from corecrypto, the encryption library running on over 2.5 billion Apple devices. It protects iMessage, VPNs, and HTTPS connections. Here is why this matters. Most encryption used today relies on math problems that regular computers find nearly impossible to solve. Quantum computers can solve those same problems with ease. They do not exist yet at the scale needed, but the threat is considered real enough that governments and major tech companies are already preparing. The solution is post-quantum cryptography, a new generation of algorithms designed to resist quantum attacks. Apple has picked two of the NIST-standardised ones: ML-KEM and ML-DSA. By open-sourcing the code and the mathematical proofs behind it, Apple is letting independent experts verify that there are no hidden flaws. This is a big deal because a single bug in corecrypto could compromise the security of every app and feature running on 2.5 billion devices. And independent review already proved its value here. During formal verification, researchers found a flaw in an early implementation that standard testing would have missed entirely. This is how security should work. Build it in public, let others verify it, fix what gets found. Apple does not always get credit for open-source contributions. This one deserves it.
10
78
7
370
11,876
Sandipan Roy retweeted
💥 Introducing "Dirty Frag" A universal Linux LPE chaining two vulns in xfrm-ESP and RxRPC. A successor class to Dirty Pipe & Copy Fail. No race, no panic on failure, fully deterministic. ~9 years latent. Ubuntu / RHEL / Fedora / openSUSE / CentOS / AlmaLinux, and more. Even if you've applied the "Copy Fail" mitigation, your Linux is still vulnerable to "Dirty Frag". Apply the Dirty Frag mitigation. Details: dirtyfrag.io
41
690
143
2,052
541,028
Sandipan Roy retweeted
🚀 DeepSeek-V4 Preview is officially live & open-sourced! Welcome to the era of cost-effective 1M context length. 🔹 DeepSeek-V4-Pro: 1.6T total / 49B active params. Performance rivaling the world's top closed-source models. 🔹 DeepSeek-V4-Flash: 284B total / 13B active params. Your fast, efficient, and economical choice. Try it now at chat.deepseek.com via Expert Mode / Instant Mode. API is updated & available today! 📄 Tech Report: huggingface.co/deepseek-ai/D… 🤗 Open Weights: huggingface.co/collections/d… 1/n
1,653
7,444
2,421
45,416
10,158,506
Sandipan Roy retweeted
Reverse engineer and get full root access on the TP-Link Tapo C200 (2025) quentinkaiser.be/security/20… Research by @qkaiser #infosec
3
74
432
25,304
Sandipan Roy retweeted
🧅 TOR archive feed: tor-archive.github.io Every IP that has ever been a TOR node! Searchable with full timeline, exit/guard/middle role, country, ASN, updated hourly since 2024.
4
95
2
617
47,523